Don't Read that DM

You may have seen the report on Mashable about a Twitter worm virus being spread via DM.

Unsuspecting users are receiving DMs with the following text:

If you get this DM, DO NOT VISIT THE LINK. It takes you to a replica of the Twitter () login page where the hackers will steal your account and use it to send out more infected DMs to your friends.

The Twitter spam account has its latest status as:

By all means, don’t click on suspicious links, even if they are from friends without taking precautions. Here is some great advice from the folks at F-Secure about avoiding the problem.

How to Tweet Safely

Avoiding Bad Links, Dangerous Twits and Sneaky Spammers

More than 18 million people already using Twitter, and it probably already feels as if everyone in the world is tweeting away. But on the Internet, great growth comes with great vulnerabilities.

Capitalizing on the trust we have for our online “friends,” criminals are increasingly targeting social networks. So, stay on your toes! To protect your irreplaceable content and invaluable financial information, remember the following while you’re tweeting, re-tweeting and hashtagging away.
1. Be Aware
Twitter is the new frontier of the Internet. And as in any gold rush town, there’s all types floating through. People going to have to learn some of the same security lessons we got used to as e-mail made its way into our lives: Watch where you click; don’t sign up for/follow everything; expect a lot of silly forwards.

2. Trust but always verify
In about two minutes, you could create a Twitter account that impersonates almost anyone living or dead. Twitter has added “Verified Accounts” for celebrities, but no one is really verifying if that page was really put up by your co-worker Stu. That said hackers probably aren’t going out of their way to impersonate your co-worker Stu.
Give any Twitter you’re thinking of following a careful scan. Check if there’s a respectable image; make sure all tweets aren’t entirely repetitive self-serving spam; see if there’s a reasonable follower to following ratio. Then, if you have an interest in their Tweets, follow away.
But don’t let your guard down.
You can never really know if any Twitter account has been taken over by someone with criminal intent. Hackers have hijacked accounts and use them to spread links to spam and phishing scams. We have also seen links point to malware sites where the end goal has been to steal online banking credentials or other personal information. You can keep track of some current Twitter spam risks by following the official Spam Account.
3. Watch those links
Now we come the biggest threat on Twitter: the LINKS. As you know, once you click a link, you could end up anywhere. And Twitter is well aware that bad links have the potential to wreck some real havoc. That’s why they’ve started filtering for malicious links. But they can’t catch everything, especially because the 140 character limit demands that most URLs be abbreviated. Shortened links—even from Twitters you know and trust—can present a unique security challenge. Links from tinyurl, bit.ly and other services have, in rare cases, led users directly to infected files or phishing scams. You can always expand the shortened links you find. But that doesn’t completely eliminate the risk of landing on a site that has been infected, hacked or spoofed.
4. Guard your passwords
Once a hacker has your password, you’re completely vulnerable. So guard your little jewels jealously. Most importantly, DO NOT use the same passwords for your e-mail accounts and your social networking. You should also use different accounts for your business and social accounts. Never use “password” as your password.
5. Never give yourself away
Your bank probably isn’t going to contact you through Twitter—but someone pretending to your bank or PayPal or a credit card company may. Verify any financial concern directly with your institution. And don’t trust anyone that’s asking for financial help. That’s pretty obvious, but the reason that scams exist is that they work!  When something is new and a little exiting like Twitter, people may lose themselves and slip up. Don’t be one of those people.
6. Be smart
A good question to ask yourself before you Tweet anything is: Would I say this in a room of strangers? Unless you “protect your tweets,” everything you post goes into the public timeline. So never share sensitive or confidential information—including your e-mail address. Specifically , don’t announce vacations or even too many details about your schedule in advance or while you’re away from your home.
.

Related articles by Zemanta

• Why Are Criminals Targeting Twitter, Facebook and Other Social Networking Sites? (sociableblog.com)
• Twitter finally attacks malicious short URLs (vator.tv)
• Twitter Auto DM: Just Say No! (socialmediatoday.com)

Twitter: love having the brands, but I don’t have to know the person behind the brand

A very provocative post on Mashable today in which Mark Drapeau shares his thoughts about brands on Twitter. Mark thinks that brands should not be on Twitter, but that people ‘hide’ behind organizational brands, obscuring their persona and therefore reducing authenticity and transparency. Yes, it’s a subject that has been discussed many times. I’ve written about brands on Twitter and best practices many times. And of course, there was the survey that Peter Sorgenfrei and I ran in which 240 Twitter users were asked to give their perceptions on brands. Once again, three key points:

Not surprisingly, most users (89%) agree that brands should engage their customers on Twitter.The majority also have a better impression of brands that use Twitter for customer service (81%).

Proper usage of Twitter however, is paramount as almost 90% of users would frown upon poor or inappropriate brand use of Twitter.

The power of a relationship is extremely strong on Twitter. 60% of respondents would recommend a company based on their presence on Twitter and 80% of Twitter users will reward those brands they have key relationships by being more willing to purchase from them.

And you can find over 50 brands using Twitter on a Social Media Marketing wiki that Peter Kim is curating.

Over 70 people have commented on Mashable today and the predominant opinion is that we like our brands on Twitter. Since Twitter is an opt-in community, I can choose to follow whoever or whatever brand I want. I was particularly impressed with Pete Blackshaw’s (author of Angry Customers tell 3000) comment, paraphrased here, Part of what’s drawn brands to Twitter has been the very enthusiastic reception of Twitterites (tens of thousands of them) who have been preaching company and brand “engagement” and “responsiveness” and “participation.” If anything, the Twitter crowd has flirted with righteousness in encouraging brands to participate.

Christine Perkett of Perkett PR says in her Mashable comment,

I think this is an interesting debate and - like anything - comes down to personal preference. That’s why I actually love Twitter - I can choose to follow, unfollow or even just save a certain brand’s “Tweet” that I want to remember.

Obviously as a marketer - and one of the brands on Twitter (in addition to the numerous clients that we’ve helped kick start on Twitter) - I am a fan of such. However, I think more specifically, I am a fan of brands doing it right. And by that I mean - engaging and being personable as you suggest. Not just using Twitter as an RSS feed. Not just blasting your own news/agenda. Combining industry insights with opinions and news and, when warranted, even humor. And, identifying who is behind the corporate handle.

Felix Leander of Burson-Marsteller, also gives a similar perspective on his excellent PR/ Social media blog.

Does anyone disagree that brands should be on Twitter, but there is certainly a right way on how to do it? How would you help a brand to understand Twitter and do it right?